tags/debian_version_3.0pl1-115/crontab.c

/* Copyright 1988,1990,1993,1994 by Paul Vixie
 * All rights reserved
 *
 * Distribute freely, except: don't remove my name from the source or
 * documentation (don't take credit for my work), mark your changes (don't
 * get me blamed for your possible bugs), don't alter or remove this
 * notice.  May be sold if buildable source is provided to buyer.  No
 * warrantee of any kind, express or implied, is included with this
 * software; use at your own risk, responsibility for damages (if any) to
 * anyone resulting from the use of this software rests entirely with the
 * user.
 *
 * Send bug reports, bug fixes, enhancements, requests, flames, etc., and
 * I'll try to keep a version up to date.  I can be reached as follows:
 * Paul Vixie          <paul@vix.com>          uunet!decwrl!vixie!paul
 */

#if !defined(lint) && !defined(LINT)
static char rcsid[] = "$Id: crontab.c,v 2.13 1994/01/17 03:20:37 vixie Exp $";
#endif

/* crontab - install and manage per-user crontab files
 * vix 02may87 [RCS has the rest of the log]
 * vix 26jan87 [original]
 */


#define MAIN_PROGRAM


#include "cron.h"
#include <errno.h>
#include <fcntl.h>
#include <signal.h>
#include <sys/file.h>
#include <sys/stat.h>
#ifdef USE_UTIMES
# include <sys/time.h>
#else
# include <time.h>
# include <utime.h>
#endif
#if defined(POSIX)
# include <locale.h>
#endif


#define NHEADER_LINES 3

enum opt_t      { opt_unknown, opt_list, opt_delete, opt_edit, opt_replace };

#if DEBUGGING
static char     *Options[] = { "???", "list", "delete", "edit", "replace" };
#endif


static  PID_T           Pid;
static  char            *User, *RealUser;
static  char            Filename[MAX_FNAME];
static  char            Directory[MAX_FNAME];
static  FILE            *NewCrontab = NULL;
static  int             CheckErrorCount;
static  int             PromptOnDelete;
static  enum opt_t      Option;
static  struct passwd   *pw;
static  void            list_cmd __P((void)),
                        delete_cmd __P((void)),
                        edit_cmd __P((void)),
                        poke_daemon __P((void)),
                        check_error __P((char *)),
                        parse_args __P((int c, char *v[]));
static  int             replace_cmd __P((void));

/* Support edit command */
static  int             create_tmp_crontab __P((void));
static  int             open_tmp_crontab __P((struct stat *fsbuf));
static  void            cleanup_tmp_crontab __P((void));

static void
usage(msg)
        char *msg;
{
        fprintf(stderr, "%s: usage error: %s\n", ProgramName, msg);
        fprintf(stderr, "usage:\t%s [-u user] file\n", ProgramName);
        fprintf(stderr, "\t%s [ -u user ] [ -i ] { -e | -l | -r }\n", ProgramName);
        fprintf(stderr, "\t\t(default operation is replace, per 1003.2)\n");
        fprintf(stderr, "\t-e\t(edit user's crontab)\n");
        fprintf(stderr, "\t-l\t(list user's crontab)\n");
        fprintf(stderr, "\t-r\t(delete user's crontab)\n");
        fprintf(stderr, "\t-i\t(prompt before deleting user's crontab)\n");
        exit(ERROR_EXIT);
}


int
main(argc, argv)
        int     argc;
        char    *argv[];
{
        int     exitstatus;

        Pid = getpid();
        ProgramName = argv[0];

#if defined(POSIX)
        setlocale(LC_ALL, "");
#endif

#if defined(BSD)
        setlinebuf(stderr);
#endif
        if (argv[1] == NULL) {
                argv[1] = "-";
        }       
        parse_args(argc, argv);         /* sets many globals, opens a file */
        set_cron_cwd();
        if (!allowed(User)) {
                if ( getuid() != 0 ) {
                    fprintf(stderr,
                            "You (%s) are not allowed to use this program (%s)\n",
                            User, ProgramName);
                    fprintf(stderr, "See crontab(1) for more information\n");
                    log_it(RealUser, Pid, "AUTH", "crontab command not allowed");
                } else {
                /* If the user is not allowed but root is running the
                 * program warn but do not log */
                    fprintf(stderr,
                            "The user %s cannot use this program (%s)\n",
                            User, ProgramName);
                }
                exit(ERROR_EXIT);
        }
        exitstatus = OK_EXIT;
        switch (Option) {
        case opt_list:          list_cmd();
                                break;
        case opt_delete:        delete_cmd();
                                break;
        case opt_edit:          edit_cmd();
                                break;
        case opt_replace:       if (replace_cmd() < 0)
                                        exitstatus = ERROR_EXIT;
                                break;
                                /* The following was added to shut
                                 -Wall up, but it will never be hit,
                                 because the option parser will catch
                                 it */
        case opt_unknown: usage("unknown option specified");
                          break;
        }
        exit(exitstatus);
        /*NOTREACHED*/
}
        
#if DEBUGGING
char *getoptarg = "u:lerix:";
#else
char *getoptarg = "u:leri";
#endif


static void
parse_args(argc, argv)
        int     argc;
        char    *argv[];
{
        int             argch;
        struct stat     statbuf;

        if (!(pw = getpwuid(getuid()))) {
                fprintf(stderr, "%s: your UID isn't in the passwd file.\n",
                        ProgramName);
                fprintf(stderr, "bailing out.\n");
                exit(ERROR_EXIT);
        }
        if (((User=strdup(pw->pw_name)) == NULL) ||
            ((RealUser=strdup(pw->pw_name)) == NULL)) {
                fprintf(stderr, "Memory allocation error\n");
                exit(ERROR_EXIT);
        }
        Filename[0] = '\0';
        Option = opt_unknown;
        PromptOnDelete = 0;

        while (EOF != (argch = getopt(argc, argv, getoptarg))) {
                switch (argch) {
#if DEBUGGING
                case 'x':
                        if (!set_debug_flags(optarg))
                                usage("bad debug option");
                        usage("unrecognized option");
                        break;
#endif
                case 'u':
                        if (!(pw = getpwnam(optarg)))
                        {
                                fprintf(stderr, "%s:  user `%s' unknown\n",
                                        ProgramName, optarg);
                                exit(ERROR_EXIT);
                        }
                        if ((getuid() != ROOT_UID) &&
                            (getuid() != pw->pw_uid))
                        {
                                fprintf(stderr,
                                        "must be privileged to use -u\n");
                                exit(ERROR_EXIT);
                        }
                        free(User);
                        if ((User=strdup(pw->pw_name)) == NULL) {
                                fprintf(stderr, "Memory allocation error\n");
                                exit(ERROR_EXIT);
                        }
                        break;
                case 'l':
                        if (Option != opt_unknown)
                                usage("only one operation permitted");
                        Option = opt_list;
                        break;
                case 'r':
                        if (Option != opt_unknown)
                                usage("only one operation permitted");
                        Option = opt_delete;
                        break;
                case 'e':
                        if (Option != opt_unknown)
                                usage("only one operation permitted");
                        Option = opt_edit;
                        break;
                case 'i':
                        PromptOnDelete = 1;
                        break;
                default:
                        usage("unrecognized option");
                }
        }

        endpwent();

        if (Option != opt_unknown) {
                if (argv[optind] != NULL) {
                        usage("no arguments permitted after this option");
                }
        } else {
                if (argv[optind] != NULL) {
                        Option = opt_replace;
                        (void) strncpy (Filename, argv[optind], (sizeof Filename)-1);
                        Filename[(sizeof Filename)-1] = '\0';

                } else {
                        usage("file name must be specified for replace");
                }
        }

        if (Option == opt_replace) {
                /* we have to open the file here because we're going to
                 * chdir(2) into /var/cron before we get around to
                 * reading the file.
                 */
                if (!strcmp(Filename, "-")) {
                        NewCrontab = stdin;
                } else {
                        /* relinquish the setuid status of the binary during
                         * the open, lest nonroot users read files they should
                         * not be able to read.  we can't use access() here
                         * since there's a race condition.  thanks go out to
                         * Arnt Gulbrandsen <agulbra@pvv.unit.no> for spotting
                         * the race.
                         */

                        if (swap_uids() < OK) {
                                perror("swapping uids");
                                exit(ERROR_EXIT);
                        }
                        if (!(NewCrontab = fopen(Filename, "r"))) {
                                perror(Filename);
                                exit(ERROR_EXIT);
                        }
                        /* Make sure we opened a normal file. */
                        if (fstat(fileno(NewCrontab), &statbuf) < 0) {
                                perror("fstat");
                                exit(ERROR_EXIT);
                        }
                        if (!S_ISREG(statbuf.st_mode)) {
                                fprintf(stderr, "%s: Not a regular file.\n", Filename);
                                exit(ERROR_EXIT);
                        }
                        if (swap_uids_back() < OK) {
                                perror("swapping uids back");
                                exit(ERROR_EXIT);
                        }
                }
        }

        Debug(DMISC, ("user=%s, file=%s, option=%s\n",
                      User, Filename, Options[(int)Option]))
}


static void
list_cmd() {
        char    n[MAX_FNAME];
        FILE    *f;
        int     ch;
#ifdef DEBIAN
        int     x;
        char    *ctnh;
#endif

        log_it(RealUser, Pid, "LIST", User);
        (void) snprintf(n, MAX_FNAME, CRON_TAB(User));
        if (!(f = fopen(n, "r"))) {
                if (errno == ENOENT) 
                        fprintf(stderr, "no crontab for %s\n", User);
                else {
                        fprintf(stderr, "%s/: fopen: %s\n", n, strerror(errno));
                }
                exit(ERROR_EXIT);
        }

        /* file is open. copy to stdout, close.
         */
        Set_LineNum(1)
#ifdef DEBIAN
          /* DEBIAN: Don't list header lines unless CRONTAB_NOHEADER is
             'N'. */
          /* ignore the top few comments since we probably put them there.
           */
          if (!(ctnh = getenv("CRONTAB_NOHEADER")) ||
              toupper(*ctnh) != 'N') 
            {
            for (x = 0;  x < NHEADER_LINES;  x++) {
              ch = get_char(f);
              if (EOF == ch)
                break;
              if ('#' != ch) {
                putchar(ch);
                break;
              }
              while (EOF != (ch = get_char(f)))
                if (ch == '\n')
                  break;
              if (EOF == ch)
                break;
            }
          }
#endif
        while (EOF != (ch = get_char(f)))
                putchar(ch);
        fclose(f);
}


static void
delete_cmd() {
        char    n[MAX_FNAME];
        char    q[MAX_TEMPSTR];
        int     ans;
        struct stat fsbuf;

        /* Check if the user has a crontab file first */
        (void) snprintf(n, MAX_FNAME, CRON_TAB(User));
        if (stat(n, &fsbuf) < 0) {
            fprintf(stderr, "no crontab for %s\n", User);
            exit(ERROR_EXIT);
        }

        if( PromptOnDelete == 1 )
        {
            printf("crontab: really delete %s's crontab? (y/n) ", User);
            fflush(stdout);
            ans = 0;
            q[0] = '\0';
            while ( ans == 0 ) {
                (void) fgets(q, sizeof q, stdin);
                switch (islower(q[0]) ? q[0] : tolower(q[0])) {
                    case 'y':
                    case 'n':
                        ans = 1;
                        break;
                    default:
                        fprintf(stderr, "Please enter Y or N: ");
                }
            }
            if ( (q[0] == 'N') || (q[0] == 'n') )
                exit(OK_EXIT);
        }

        log_it(RealUser, Pid, "DELETE", User);
        if (unlink(n)) {
                if (errno == ENOENT)
                        fprintf(stderr, "no crontab for %s\n", User);
                else {
                        fprintf(stderr, "%s/: unlink: %s\n", CRONDIR, strerror(errno));
                }
                exit(ERROR_EXIT);
        }
        poke_daemon();
}


static void
check_error(msg)
        char    *msg;
{
        CheckErrorCount++;
        fprintf(stderr, "\"%s\":%d: %s\n", Filename, LineNumber-1, msg);
}


/* The next several function implement 'crontab -e' */

/* Returns -1 on error, or fd to tempfile. */
static int
create_tmp_crontab()
{
        const char *template = "/crontab.XXXXXX";
        int nfd;
        char *tmp;

        /* Create the temp directory. Note that since crontab is
           setuid(root), TMPDIR only work for root. */
        if ((tmp=getenv("TMPDIR")) && strlen(tmp) < MAX_FNAME) {
          strcpy(Directory, tmp);
        } else {
          strcpy(Directory,"/tmp");
        }

        if (strlen(Directory) + strlen(template) < MAX_FNAME) {
                strcat(Directory, template);
        } else {
                fprintf(stderr, "TMPDIR value is to long -- exiting\n");
                Directory[0] = '\0';
                return -1;
        }

        if (!mkdtemp(Directory)) {
                perror(Directory);
                Directory[0] = '\0';
                return -1;
        }

        /* Now create the actual temporary crontab file */
        if (snprintf(Filename, MAX_FNAME, "%s/crontab", Directory)
            >= MAX_FNAME) {
                fprintf(stderr, "Temporary filename too long - aborting\n");
                Filename[0] = '\0';
                return -1;
        }
        if ((nfd=open(Filename, O_CREAT|O_EXCL|O_WRONLY, 0600)) == -1) {
                perror(Filename);
                Filename[0] = '\0';
                return -1;
        }
        return nfd;
}

/* Re-open the new (temporary) crontab, and check to make sure that
   no-one is playing games. Return 0 on success, -1 on error. (Why not
   just fopen() and stat()? Because there's no guarantee that you
   fopen()ed the file you stat()ed.) */
static int
open_tmp_crontab(fsbuf)
      struct stat *fsbuf;
{
        int t;
        struct stat statbuf;

        if ((t=open(Filename, O_RDONLY)) < 0) {
                perror("Can't open tempfile after edit");
                return -1;
        }

        if (fstat(t, &statbuf) < 0) {
                perror("fstat");
                return -1;
        }
        if (statbuf.st_uid != getuid()) {
                fprintf(stderr, "Temporary crontab no longer owned by you.\n");
                return -1;;
        }

        if (!S_ISREG(statbuf.st_mode)) {
                fprintf(stderr, "The temporary crontab must remain a regular file");
                return -1;
        }

        if (statbuf.st_mtime == fsbuf->st_mtime) {
                return 1; /* No change to file */
        }

        NewCrontab = fdopen(t, "r");
        if (!NewCrontab) {
                perror("fdopen(): after edit");
                return -1;
        }
        return 0;
}

/* We can't just delete Filename, because the editor might have
   created other temporary files in there. If there's an error, we
   just bail, and let the user/admin deal with it.*/

static void
cleanup_tmp_crontab(void) 
{
        DIR *dp;
        struct dirent *ep;
        char fname[MAX_FNAME];

        if (Directory[0] == '\0') {
                return;
        }

        /* Delete contents */
        dp = opendir (Directory);
        if (dp == NULL) {
                perror(Directory);
                return;
        }

        while ((ep = readdir (dp))) {
                if (!strcmp(ep->d_name, ".") ||
                    !strcmp(ep->d_name, "..")) {
                        continue;
                }
                if (snprintf(fname, MAX_FNAME, "%s/%s",
                             Directory, ep->d_name) >= MAX_FNAME) {
                        fprintf(stderr, "filename too long to delete: %s/%s",
                                Directory, ep->d_name);
                        return;
                }
                if (unlink(fname)) {
                        perror(ep->d_name);
                        return;
                }
        }
        (void) closedir (dp);

        if (rmdir(Directory)) {
                perror(Directory);
                return;
        }
        return;
}

static void
edit_cmd() {
        char            n[MAX_FNAME], q[MAX_TEMPSTR], *editor;
        FILE            *f;
        int             ch, t, x;
        struct stat     fsbuf;
        WAIT_T          waiter;
        PID_T           pid, xpid;
        mode_t          um;
        int             add_help_text = 0;

        log_it(RealUser, Pid, "BEGIN EDIT", User);
        (void) snprintf(n, MAX_FNAME, CRON_TAB(User));
        if (!(f = fopen(n, "r"))) {
                if (errno != ENOENT) {
                        fprintf(stderr, "%s/: fdopen: %s", n, strerror(errno));
                        exit(ERROR_EXIT);
                }
                fprintf(stderr, "no crontab for %s - using an empty one\n",
                        User);
                if (!(f = fopen("/dev/null", "r"))) {
                        perror("/dev/null");
                        exit(ERROR_EXIT);
                }
                add_help_text = 1;
        }

        um = umask(077);

        if ((t=create_tmp_crontab()) < 0) {
                fprintf(stderr, "Creation of temporary crontab file failed - aborting\n");
                (void) umask(um);
                goto fatal;
        }

        (void) umask(um);
        if (!(NewCrontab = fdopen(t, "w"))) {
                perror("fdopen");
                goto fatal;
        }

        Set_LineNum(1)

        if (add_help_text) {
                fprintf(NewCrontab, 
"# Edit this file to introduce tasks to be run by cron.\n"
"# \n"
"# Each task to run has to be defined through a single line\n"
"# indicating with different fields when the task will be run\n"
"# and what command to run for the task\n"
"# \n"
"# To define the time you can provide concrete values for\n"
"# minute (m), hour (h), day of month (dom), month (mon),\n"
"# and day of week (dow) or use '*' in these fields (for 'any')."
"# \n"
"# Notice that tasks will be started based on the cron's system\n"
"# daemon's notion of time and timezones.\n"
"# \n"
"# Output of the crontab jobs (including errors) is sent through\n"
"# email to the user the crontab file belongs to (unless redirected).\n"
"# \n"
"# For example, you can run a backup of all your user accounts\n"
"# at 5 a.m every week with:\n"
"# 0 5 * * 1 tar -zcf /var/backups/home.tgz /home/\n"
"# \n"
"# For more information see the manual pages of crontab(5) and cron(8)\n" 
"# \n"
"# m h  dom mon dow   command\n" );
        }

        /* ignore the top few comments since we probably put them there.
         */
        for (x = 0;  x < NHEADER_LINES;  x++) {
                ch = get_char(f);
                if (EOF == ch)
                        break;
                if ('#' != ch) {
                        putc(ch, NewCrontab);
                        break;
                }
                while (EOF != (ch = get_char(f)))
                        if (ch == '\n')
                                break;
                if (EOF == ch)
                        break;
        }

        /* copy the rest of the crontab (if any) to the temp file.
         */
        if (EOF != ch)
                while (EOF != (ch = get_char(f)))
                        putc(ch, NewCrontab);
        fclose(f);

        if (ferror(NewCrontab)) {
                fprintf(stderr, "%s: error while writing new crontab to %s\n",
                        ProgramName, Filename);
        }

        if (fstat(t, &fsbuf) < 0) {
                perror("unable to stat temp file");
                goto fatal;
        }


        /* Okay, edit the file */

        if ((!((editor = getenv("VISUAL")) && strlen(editor)))
         && (!((editor = getenv("EDITOR")) && strlen(editor)))
            ) {
                editor = EDITOR;
        }


        /*  Close before cleanup_tmp_crontab is called or otherwise
         *  (on NFS mounted /) will get renamed on unlink */
        if (fclose(NewCrontab) != 0) {
                perror(Filename);
                goto fatal;
        }

again: /* Loop point for retrying edit after error */

        /* Turn off signals. */
        (void)signal(SIGHUP, SIG_IGN);
        (void)signal(SIGINT, SIG_IGN);
        (void)signal(SIGQUIT, SIG_IGN);

        /* Give up privileges while editing */
        swap_uids();

        switch (pid = fork()) {
        case -1:
                perror("fork");
                goto fatal;
        case 0:
                /* child */
                if (setgid(getgid()) < 0) {
                        perror("setgid(getgid())");
                        exit(ERROR_EXIT);
                }
                if (setuid(getuid()) < 0) {
                        perror("setuid(getuid())");
                        exit(ERROR_EXIT);
                }
                if (chdir("/tmp") < 0) {
                        perror("chdir(/tmp)");
                        exit(ERROR_EXIT);
                }
                if (strlen(editor) + strlen(Filename) + 2 >= MAX_TEMPSTR) {
                        fprintf(stderr, "%s: editor or filename too long\n",
                                ProgramName);
                        exit(ERROR_EXIT);
                }
                snprintf(q, MAX_TEMPSTR, "%s %s", editor, Filename);
                execlp(_PATH_BSHELL, _PATH_BSHELL, "-c", q, NULL);
                perror(editor);
                exit(ERROR_EXIT);
                /*NOTREACHED*/
        default:
                /* parent */
                break;
        }

        /* parent */
        while (1) {
                xpid = waitpid(pid, &waiter, WUNTRACED);
                if (xpid == -1) {
                        fprintf(stderr, "%s: waitpid() failed waiting for PID %d from \"%s\": %s\n",
                                ProgramName, pid, editor, strerror(errno));
                } else if (xpid != pid) {
                        fprintf(stderr, "%s: wrong PID (%d != %d) from \"%s\"\n",
                                ProgramName, xpid, pid, editor);
                        goto fatal;
                } else if (WIFSTOPPED(waiter)) {
                        /* raise(WSTOPSIG(waiter)); Not needed and breaks in job control shell*/
                } else if (WIFEXITED(waiter) && WEXITSTATUS(waiter)) {
                        fprintf(stderr, "%s: \"%s\" exited with status %d\n",
                                ProgramName, editor, WEXITSTATUS(waiter));
                        goto fatal;
                } else if (WIFSIGNALED(waiter)) {
                        fprintf(stderr,
                                "%s: \"%s\" killed; signal %d (%score dumped)\n",
                                ProgramName, editor, WTERMSIG(waiter),
                                WCOREDUMP(waiter) ?"" :"no ");
                        goto fatal;
                } else
                        break;
        }
        (void)signal(SIGHUP, SIG_DFL);
        (void)signal(SIGINT, SIG_DFL);
        (void)signal(SIGQUIT, SIG_DFL);
        (void)signal(SIGTSTP, SIG_DFL);

        /* Need privs again */
        swap_uids_back();

        switch (open_tmp_crontab(&fsbuf)) {
        case -1:
                fprintf(stderr, "Error while editing crontab\n");
                goto fatal;
        case 1:
                fprintf(stderr, "No modification made\n");
                goto remove;
        case 0:
                break;
        default:
                fprintf(stderr,
                        "cron@packages.debian.org fscked up. Send him a nasty note\n");
                break;
        }

        fprintf(stderr, "%s: installing new crontab\n", ProgramName);
        switch (replace_cmd()) {
        case 0:
                break;
        case -1:
                for (;;) {
                        printf("Do you want to retry the same edit? (y/n) ");
                        fflush(stdout);
                        q[0] = '\0';
                        (void) fgets(q, sizeof q, stdin);
                        switch (islower(q[0]) ? q[0] : tolower(q[0])) {
                        case 'y':
                                goto again;
                        case 'n':
                                goto abandon;
                        default:
                                fprintf(stderr, "Enter Y or N\n");
                        }
                }
                /*NOTREACHED*/
        case -2:
        abandon:
                fprintf(stderr, "%s: edits left in %s\n",
                        ProgramName, Filename);
                goto done;
        default:
                fprintf(stderr, "%s: panic: bad switch() in replace_cmd()\n",
                    ProgramName);
                goto fatal;
        }

       if (fclose(NewCrontab) != 0) {
               perror(Filename);
       }

 remove:
        cleanup_tmp_crontab();
 done:
        log_it(RealUser, Pid, "END EDIT", User);
        return;
 fatal:
        cleanup_tmp_crontab();
        unlink(Filename);
        exit(ERROR_EXIT);
}

static char tn[MAX_FNAME];

static void sig_handler(int x)
{
        unlink(tn);
        exit(1);
}       

/* returns      0       on success
 *              -1      on syntax error
 *              -2      on install error
 */
static int
replace_cmd() {
        char    n[MAX_FNAME], envstr[MAX_ENVSTR];
        FILE    *tmp;
        int     ch, eof, fd;
        int     nl = FALSE;
        entry   *e;
        time_t  now = time(NULL);
        char    **envp = env_init();
        mode_t  um;

        if (envp == NULL) {
                fprintf(stderr, "%s: Cannot allocate memory.\n", ProgramName);
                return (-2);
        }


        /* Assumes Linux-style signal handlers (takes int, returns void) */
        /* Signal handlers, to ensure we do not leave temp files in the
           spool dir.  We don't remove these on exiting this function;
           but that's OK, we exit immediately afterwards anyway. */
        signal(SIGHUP, sig_handler);
        signal(SIGINT, sig_handler);
        signal(SIGQUIT, sig_handler);
        signal(SIGTSTP, SIG_IGN);

        (void) snprintf(tn, MAX_FNAME, CRON_TAB("tmp.XXXXXX"));
        um = umask(077);
        fd = mkstemp(tn);
        if (fd < 0) {
                fprintf(stderr, "%s/: mkstemp: %s\n", CRONDIR, strerror(errno));
                return(-2);
        }
        tmp = fdopen(fd, "w+");
        if (!tmp) {
                fprintf(stderr, "%s/: fdopen: %s\n", CRONDIR, strerror(errno));
                return (-2);
        }
        (void) umask(um);

        /* write a signature at the top of the file.
         *
         * VERY IMPORTANT: make sure NHEADER_LINES agrees with this code.
         */
        fprintf(tmp, "# DO NOT EDIT THIS FILE - edit the master and reinstall.\n");
        fprintf(tmp, "# (%s installed on %-24.24s)\n", Filename, ctime(&now));
        fprintf(tmp, "# (Cron version -- %s)\n", rcsid);

        /* copy the crontab to the tmp
         */
        rewind(NewCrontab);
        Set_LineNum(1)
        while (EOF != (ch = get_char(NewCrontab)))
                putc(ch, tmp);

        if (ferror(tmp) || fflush(tmp) || fsync(fd)) {
                fprintf(stderr, "%s: %s: %s\n",
                        ProgramName, tn, strerror(errno));
                fclose(tmp);  unlink(tn);
                return (-2);
        }

        /* check the syntax of the file being installed.
         */
        rewind(tmp);
        /* BUG: was reporting errors after the EOF if there were any errors
         * in the file proper -- kludged it by stopping after first error.
         *              vix 31mar87
         */
        Set_LineNum(1 - NHEADER_LINES)
        CheckErrorCount = 0;  eof = FALSE;
        while (!CheckErrorCount && !eof) {
                switch (load_env(envstr, tmp)) {
                case ERR:
                        eof = TRUE;
                        if (envstr[0] == '\0')
                                nl = TRUE;
                        break;
                case FALSE:
                        e = load_entry(tmp, check_error, pw, envp);
                        if (e)
                                free(e);
                        break;
                case TRUE:
                        break;
                }
        }

        if (CheckErrorCount != 0) {
                fprintf(stderr, "errors in crontab file, can't install.\n");
                fclose(tmp);  unlink(tn);
                return (-1);
        }

        if (nl == FALSE) {
                fprintf(stderr, "new crontab file is missing newline before "
                                "EOF, can't install.\n");
                fclose(tmp);  unlink(tn);
                return (-1);
        }


#ifdef HAS_FCHMOD
        if (fchmod(fileno(tmp), 0600) < OK)
#else
        if (chmod(tn, 0600) < OK)
#endif
        {
                perror("chmod");
                fclose(tmp);  unlink(tn);
                return (-2);
        }


        if (fclose(tmp) == EOF) {
                perror("fclose");
                unlink(tn);
                return (-2);
        }

        /* Root on behalf of another user must set file owner to that user */
        if (getuid() == ROOT_UID && strcmp(User, RealUser) != 0) {
            if (chown(tn, pw->pw_uid, -1) != 0) {
                perror("chown");
                unlink(tn);
                return -2;
            }
        }

        (void) snprintf(n, sizeof(n), CRON_TAB(User));
        if (rename(tn, n)) {
                fprintf(stderr, "%s: %s: rename: %s\n",
                        ProgramName, n, strerror(errno));
                unlink(tn);
                return (-2);
        }


        log_it(RealUser, Pid, "REPLACE", User);

        poke_daemon();

        return (0);
}


static void
poke_daemon() {
#ifdef USE_UTIMES
        struct timeval tvs[2];
        struct timezone tz;

        (void) gettimeofday(&tvs[0], &tz);
        tvs[1] = tvs[0];
        if (utimes(SPOOL_DIR, tvs) < OK) {
                fprintf(stderr, "%s/: utimes: %s", CRONDIR, strerror(errno));
                fputs("crontab: can't update mtime on spooldir\n", stderr);
                return;
        }
#else
        if (utime(SPOOL_DIR, NULL) < OK) {
                fprintf(stderr, "%s: utime: %s\n", CRONDIR, strerror(errno));
                fputs("crontab: can't update mtime on spooldir\n", stderr);
                return;
        }
#endif /*USE_UTIMES*/
}